Why isn't Fast User Switching enabled on domains?http://blogs.msdn.com/b/oldnewthing/archive/2003/11/21/55799.aspxWindows XP added a new feature called Fast User Switching which lets
you switch between users without having to log off.
But this feature is disabled if your computer is joined to a domain.
Why?en-USTelligent Evolution Platform Developer Build (Build: 5.6.50428.7875)RANU: Give me another TS sessionhttp://blogs.msdn.com/b/oldnewthing/archive/2003/11/21/55799.aspx#183135Wed, 14 Jul 2004 20:02:00 GMT91d46819-8472-40ad-a661-2c78acb4018c:183135jaybaz [MS] WebLog<div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=183135" width="1" height="1">RANU: Give me another TS sessionhttp://blogs.msdn.com/b/oldnewthing/archive/2003/11/21/55799.aspx#161716Mon, 21 Jun 2004 23:36:00 GMT91d46819-8472-40ad-a661-2c78acb4018c:161716jaybaz [MS] WebLog<div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=161716" width="1" height="1">re: Why isn't Fast User Switching enabled on domains?http://blogs.msdn.com/b/oldnewthing/archive/2003/11/21/55799.aspx#150126Mon, 07 Jun 2004 15:49:00 GMT91d46819-8472-40ad-a661-2c78acb4018c:150126Raymond ChenThis was not meant to be a comprehensive list. The primary reason was the last sentence: To get Fast User Switching to work on domains would have required more infrastructure than there was time to implement.
<br>
<br>I'm going to close commenting on this entry now that it's over six months old.<div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=150126" width="1" height="1">re: Why isn't Fast User Switching enabled on domains?http://blogs.msdn.com/b/oldnewthing/archive/2003/11/21/55799.aspx#150122Mon, 07 Jun 2004 15:45:00 GMT91d46819-8472-40ad-a661-2c78acb4018c:150122JayConsidering he only gave two reasons, both of which are pretty vague, I think this entry was totally useless. Someone above said &quot;Charles, your point would be much better if you hadn't chosen to focus on one particular piece of information to the exclusion of everything else&quot;. That's laughable, considering &quot;everything else&quot; was &quot;it was too hard for us to do.&quot; How is this actually useful?<div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=150122" width="1" height="1">re: Why isn't Fast User Switching enabled on domains?http://blogs.msdn.com/b/oldnewthing/archive/2003/11/21/55799.aspx#143484Fri, 28 May 2004 01:00:00 GMT91d46819-8472-40ad-a661-2c78acb4018c:143484RajivOr buy a nice copy of Windows 2003 Server....<div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=143484" width="1" height="1">re: Why isn't Fast User Switching enabled on domains?http://blogs.msdn.com/b/oldnewthing/archive/2003/11/21/55799.aspx#141576Tue, 25 May 2004 18:57:00 GMT91d46819-8472-40ad-a661-2c78acb4018c:141576Ryan McCauleyI was really hoping that simultaneous console/remote usage would be a new feature of XP in SP2, but it looks like we'll have to wait until Longhorn. I can understand why they wouldn't want to alter the GINA, but it would be a *really* nice feature to have. Oh well - I guess I'll hold on until 2007, or until somebody hacks the LOGONUI.EXE process. :)<div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=141576" width="1" height="1">re: Why isn't Fast User Switching enabled on domains?http://blogs.msdn.com/b/oldnewthing/archive/2003/11/21/55799.aspx#139491Sat, 22 May 2004 15:26:00 GMT91d46819-8472-40ad-a661-2c78acb4018c:139491ToddLook in this registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon and rename the GinaDLL value name with a different name. That did the trick for me!
<br>
<br>Tried this but wasn't able to log in to XP after. Had to boot up in safe mode go back into the registry and change the winlogin value back to CSGina.dll. Incidently it was a Cisco VPN client that disabled the FUS. Oh well to FUS no mess.<div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=139491" width="1" height="1">RE: Why isn't Fast User Switching enabled on domains?http://blogs.msdn.com/b/oldnewthing/archive/2003/11/21/55799.aspx#55822Fri, 28 Nov 2003 19:37:00 GMT91d46819-8472-40ad-a661-2c78acb4018c:55822Garry TrinderCharles, your point would be much better if you hadn't chosen to focus on one particular piece of information to the exclusion of everything else. Raymond has said, twice, that those were not the only two problems, but just an example of the problems involved. See his comment from 11/21/2003 at 12:06 PM on this page. If you're going to try and be glib and/or insulting, which is how I perceive that comment, you'll have to do a better job.<div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=55822" width="1" height="1">RE: Why isn't Fast User Switching enabled on domains?http://blogs.msdn.com/b/oldnewthing/archive/2003/11/21/55799.aspx#55821Tue, 25 Nov 2003 21:19:00 GMT91d46819-8472-40ad-a661-2c78acb4018c:55821Charles&quot;How do you show all the users on the domain in the Welcome screen? You certainly don't want a list with 10,000 names in it. (Scroll scroll scroll.)&quot;
No, you simply have a system where you let the user enter their username. That is, the LOGIN: prompt. But prettier. Is this so impossible to contemplate? Has none of you guys seen a Unix box?<div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=55821" width="1" height="1">RE: Why isn't Fast User Switching enabled on domains?http://blogs.msdn.com/b/oldnewthing/archive/2003/11/21/55799.aspx#55820Mon, 24 Nov 2003 16:14:00 GMT91d46819-8472-40ad-a661-2c78acb4018c:55820DamitUnfortunately, I think the last time I tried this I couldn't authenticate with the network at all... so maybe it is needed.
Thanks anyway!<div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=55820" width="1" height="1">RE: Why isn't Fast User Switching enabled on domains?http://blogs.msdn.com/b/oldnewthing/archive/2003/11/21/55799.aspx#55819Mon, 24 Nov 2003 06:59:00 GMT91d46819-8472-40ad-a661-2c78acb4018c:55819Michael Geary&quot;The drivers for my wireless LAN card (Cisco Aironet 350) install a GINA to support LEAP, which breaks (among other things) FUS.&quot;
The Cisco 350 driver installs a replacement GINA, but it doesn't need it unless your LEAP password is tied to your login password. Look in this registry key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
and rename the GinaDLL value name with a different name. That did the trick for me!<div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=55819" width="1" height="1">RE: Why isn't Fast User Switching enabled on domains?http://blogs.msdn.com/b/oldnewthing/archive/2003/11/21/55799.aspx#55818Sat, 22 Nov 2003 18:07:00 GMT91d46819-8472-40ad-a661-2c78acb4018c:55818DamitAdditionally, why is it that FUS has to be disabled when using a non-MS GINA? The drivers for my wireless LAN card (Cisco Aironet 350) install a GINA to support LEAP, which breaks (among other things) FUS.
Of course, it doesn't help that my laptop is joined to a domain either. =)<div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=55818" width="1" height="1">RE: Why isn't Fast User Switching enabled on domains?http://blogs.msdn.com/b/oldnewthing/archive/2003/11/21/55799.aspx#55817Sat, 22 Nov 2003 17:05:00 GMT91d46819-8472-40ad-a661-2c78acb4018c:55817James DayPlease do disable anything which causes an ActiveX control request. I wouldn't know whether you're using a gradient or not. Site pops up an ActiveX control request, I say no. Or, if I really want something, I look at every piece of code on the site before saying yes, so I can be sure of which controls I'm granting permission to use. A pain even when the administrator kill bit is usually set for the most common ad engine, Flash. Usually, ActiveX requests are a quick way to the Restricted Sites zone. Such is life with a grossly untrustable interface.<div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=55817" width="1" height="1">RE: Why isn't Fast User Switching enabled on domains?http://blogs.msdn.com/b/oldnewthing/archive/2003/11/21/55799.aspx#55816Sat, 22 Nov 2003 13:04:00 GMT91d46819-8472-40ad-a661-2c78acb4018c:55816Roland KaufmannWhat I would like to see is something we could perhaps call &quot;Slow User Switching&quot;; that you could lock the workstation using Ctrl-Alt-Del, and when pressing the secure attention sequence again, you get the choice of unlocking one of the existing sessions or if you want to logon with a new session (including another session for the same user), i.e. the unlock and logon dialog that resides on the WinLogon desktop should be merged into one.<div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=55816" width="1" height="1">RE: Why isn't Fast User Switching enabled on domains?http://blogs.msdn.com/b/oldnewthing/archive/2003/11/21/55799.aspx#55815Sat, 22 Nov 2003 12:59:00 GMT91d46819-8472-40ad-a661-2c78acb4018c:55815Garry TrinderNot having the ability to use FUS on domains was a great bummer
when I first saw XP.
But another even worse bummer is that &quot;offline folders&quot; don't work
together with FUS (I would really like to use an admin account
and an useraccount and switch between both without closing all
open applications and browser windows, but I need offline folders,
too). This was also the case with Windows Server 2000 (enabling
Terminalservices silently removed the offline-folders tabs and
menu entries from the GUI), where I once wondered why that feature
was suddenly gone.
I would really like to ignore whatever problems MS sees in enabling
offline folders and FUS together and would use ANY hack to force
it to be enabled, but I don't know any.
I guess that the feature was removed because it is not clear which
user accesses the offline folders.
On a expo someone from MS promised that offline folders and terminalservices
would work together in Windows Server 2003, but they don't.
Glad to hear that in Longhorn this stupid limitations will finally be
gone. It is really bad if XP has several great features, but you
find out that you only can enable one of them, not all. Nothing can
be more disappointing about an operation system!
It would be cool if you could add more points/problems to the list in your
post. This is the first time I read someonething about these limitation
and more details would be great.
Regarding the new logon-screen:
Try this: Enter a wrong password in the new GUI. Then hit STRG+ALT+ENTF
twice. Now look at the two input fields of the traditional GINA:
They are filled out.
Looks like the developers of XP were totally afraid of changing anything
in GINA and they just glued some kind of decorating frontend over it.
I think the logonui.exe can even crash without any problems.
Kind of strange way to develop things. Of course it has its advantages,
but it also feels &quot;not right&quot;.
Hearing that logonui will even try to log you in with an empty password
is strange, too!
I hope that longhorn will clean out a lot of the mess that is hidden
inside Windows layers and layers of compatibilty. Many areas have a
great design, but there is a lot of dirt hidden inside windows.<div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=55815" width="1" height="1">RE: Why isn't Fast User Switching enabled on domains?http://blogs.msdn.com/b/oldnewthing/archive/2003/11/21/55799.aspx#55814Sat, 22 Nov 2003 11:38:00 GMT91d46819-8472-40ad-a661-2c78acb4018c:55814Serge WautierMy use of 'Fast User Switching' : Software translation help ! My XP Pro is in English but I installed French as well (MUI). When I need to update the translation of my app from English to French, I often come to wonder how a usual term is translated by MS. Quick switch to another user purposely set up with French UI and I have my answer in seconds !
BTW: Yes, I'm a native french speaker. But we do develop UI in English first because of international audience. And since I've always used an English Windows, I'm not familiar with common computer terminology in my own language !
I'm sure folks who designed the fast user switching didn't think of that use ;-)<div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=55814" width="1" height="1">RE: Why isn't Fast User Switching enabled on domains?http://blogs.msdn.com/b/oldnewthing/archive/2003/11/21/55799.aspx#55813Sat, 22 Nov 2003 04:18:00 GMT91d46819-8472-40ad-a661-2c78acb4018c:55813Dominic HoptonThe other problem you face with FUS in a domain sitation is when someone FUSs away from their user (goes home for the day), and someone uses that machine, but when the user returns, they return to a differant machine (hot desking maybe) - how do you manage that? None of it's simple.<div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=55813" width="1" height="1">RE: Why isn't Fast User Switching enabled on domains?http://blogs.msdn.com/b/oldnewthing/archive/2003/11/21/55799.aspx#55812Sat, 22 Nov 2003 01:50:00 GMT91d46819-8472-40ad-a661-2c78acb4018c:55812Raymond ChenBecause it would be ugly to prompt the user for their password when they don't have one!<div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=55812" width="1" height="1">RE: Why isn't Fast User Switching enabled on domains?http://blogs.msdn.com/b/oldnewthing/archive/2003/11/21/55799.aspx#55811Sat, 22 Nov 2003 01:10:00 GMT91d46819-8472-40ad-a661-2c78acb4018c:55811Engelke Eschneruh, this may be a stupid question but why does the xp welcome screen try to log you in? and is there no that it can be turned off?<div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=55811" width="1" height="1">RE: Why isn't Fast User Switching enabled on domains?http://blogs.msdn.com/b/oldnewthing/archive/2003/11/21/55799.aspx#55810Fri, 21 Nov 2003 23:07:00 GMT91d46819-8472-40ad-a661-2c78acb4018c:55810Raymond ChenAs I noted in the entry itself, it was technically feasible but would have been a lot of work to get right [I listed only two of the problems]; it was a simple matter of not enough tim/resources. (Making changes to the classic logon UI is a particularly risky endeavour since winlogon is a super-critical system process.) And as I also noted, there *is* enough time/resources to do this for Longhorn.
<div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=55810" width="1" height="1">RE: Why isn't Fast User Switching enabled on domains?http://blogs.msdn.com/b/oldnewthing/archive/2003/11/21/55799.aspx#55809Fri, 21 Nov 2003 22:19:00 GMT91d46819-8472-40ad-a661-2c78acb4018c:55809Kevin DenteThere's something I don't get. Why is fast user switching tied to the user list version of the welcome screen? When you're running a domain, it doesn't present the big friendly list, it just gives you a log-in dialog where you type in your user name and password. So why couldn't the &quot;Switch user&quot; option just have taken you back to the login dialog, where you could enter a different domain user account and password?
FUS could have been great for testing different locale settings, but since it's not supported on domains I can't use it at work.<div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=55809" width="1" height="1">RE: Why isn't Fast User Switching enabled on domains?http://blogs.msdn.com/b/oldnewthing/archive/2003/11/21/55799.aspx#55808Fri, 21 Nov 2003 22:10:00 GMT91d46819-8472-40ad-a661-2c78acb4018c:55808Tekumsethere is no gradient in Mozilla and would have never known it is in the style until this dsicussion. Thus I don't any warning either.<div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=55808" width="1" height="1">RE: Why isn't Fast User Switching enabled on domains?http://blogs.msdn.com/b/oldnewthing/archive/2003/11/21/55799.aspx#55807Fri, 21 Nov 2003 21:28:00 GMT91d46819-8472-40ad-a661-2c78acb4018c:55807Raymond ChenAh that's coming from the gradient effect. Apparently the IE folks now believe gradients to be a security risk so it prompts you. Should I remove the gradient, folks? I kind of like it.<div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=55807" width="1" height="1">RE: Why isn't Fast User Switching enabled on domains?http://blogs.msdn.com/b/oldnewthing/archive/2003/11/21/55799.aspx#55806Fri, 21 Nov 2003 21:14:00 GMT91d46819-8472-40ad-a661-2c78acb4018c:55806Eric W. BachtalRegarding the CSS, I can't speak for Mr. Sznajder, but the div header and H3 entryTitle filters always get me an unwelcome ActiveX automation security question. However, after answering No, I always get a very readable page.<div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=55806" width="1" height="1">RE: Why isn't Fast User Switching enabled on domains?http://blogs.msdn.com/b/oldnewthing/archive/2003/11/21/55799.aspx#55805Fri, 21 Nov 2003 21:01:00 GMT91d46819-8472-40ad-a661-2c78acb4018c:55805Raymond ChenI don't control the framing HTML the blog server generates. I just upload blog entries and it injects them into the frame. (Okay I also control the CSS file which is how I can set the goofy colors.) What noncompliance is causing problems? Maybe it's something within my control (but I doubt it).<div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=55805" width="1" height="1">